break.com.br

Issued by R3

About this certificate

This digital certificate with serial number 03:e3:a2:88:9a:b8:a9:50:ec:46:de:92:66:c7:14:24:d4:11 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=break.com.br

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:e3:a2:88:9a:b8:a9:50:ec:46:de:92:66:c7:14:24:d4:11
Serial Number (int): 338796999312145149915518691214536990839825
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: e7:c3:aa:d4:5c:b9:96:7a:4c:67:d2:b3:f8:b1:70:62:23:4b:64:98
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 13:8f:b1:a3:7f:a0:e9:72:2b:7a:8a:3d:1e:f7:93:86:8d:bc:fa:9c
Fingerprint (sha256): 4c:f8:13:41:b2:83:a1:96:82:ae:c1:f8:3e:c4:a4:9e:c8:a4:d5:60:78:a5:6d:d9:bb:53:5d:7e:07:e3:e5:b9

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate break.com.br

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for break.com.br

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.1bbzz.com
*.9rayti.net
*.abusers.net
*.anlegerwohnung.de
*.balboapropertyserivces.com
*.barkinganddagenhamnews.co.uk
*.barons.org
*.bazarbrasil.com.br
*.break.com.br
*.buildbits.com.au
*.burtonradio.co.uk
*.comparemoji.com
*.duilawyers.de
*.duties.org
*.dyk.be
*.ebay-kleinanzeifen.de
*.eianadanieli.com
*.fefe.nl
*.firstveiw.net
*.fullloves.com
*.gofarmer.com.au
*.heurea.cz
*.kht.eu
*.kirriemuirnews.co.uk
*.kkm.de
*.kreufahrten-zentrale.de
*.lasagnerezept.de
*.livestockranch.com
*.loka.nl
*.mediont.pl
*.nakupujevamto.sk
*.plasticwrap.com.au
*.produces.org
*.rollbars.com.au
*.sdak.net
*.testsitemv1.com
*.theneuralnetwork.com.au
*.travelrepublic.com.au
*.wellnisreisen.de
*.westberkshirenews.co.uk
*.xn--badmbel-gnstig-ypb5h.de
*.xn--bchingen-n4a.de
*.xn--schildkrtenverkauf-k3b.de
*.xn--sprche-und-wnsche-42bj.de
*.xn--suglingsakne-gcb.de
*.xn--tintegnstig-yhb.de
*.xn--torbnder-3za.de
*.xn--wrmestrmung-l8a4v.de
*.yin-yang.info
*.youcanfollow.net
1bbzz.com
9rayti.net
abusers.net
anlegerwohnung.de
balboapropertyserivces.com
barkinganddagenhamnews.co.uk
barons.org
bazarbrasil.com.br
break.com.br
buildbits.com.au
burtonradio.co.uk
comparemoji.com
duilawyers.de
duties.org
dyk.be
ebay-kleinanzeifen.de
eianadanieli.com
fefe.nl
firstveiw.net
fullloves.com
gofarmer.com.au
heurea.cz
kht.eu
kirriemuirnews.co.uk
kkm.de
kreufahrten-zentrale.de
lasagnerezept.de
livestockranch.com
loka.nl
mediont.pl
nakupujevamto.sk
plasticwrap.com.au
produces.org
rollbars.com.au
sdak.net
testsitemv1.com
theneuralnetwork.com.au
travelrepublic.com.au
wellnisreisen.de
westberkshirenews.co.uk
xn--badmbel-gnstig-ypb5h.de
xn--bchingen-n4a.de
xn--schildkrtenverkauf-k3b.de
xn--sprche-und-wnsche-42bj.de
xn--suglingsakne-gcb.de
xn--tintegnstig-yhb.de
xn--torbnder-3za.de
xn--wrmestrmung-l8a4v.de
yin-yang.info
youcanfollow.net

Other certificates including the domain name break.com.br

(limited to 100 certificates)

Certificate

The complete raw certificate details for break.com.br in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 338796999312145149915518691214536990839825
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-11-17 06:26:55 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-02-15 06:26:54 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'break.com.br'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 761864922604910647044946081075656599791661956161986707361474445269611260506472910968687172394652149950713400485555581640908313938540471209719842907929711820750812515054325419855721360535078901264758872183489076259099862103829260785191341900805440228547828222702734738037645661950756834773402530424793340536635685005333979623115161973669482233302786685799538623610630670780679870249980899020954473292671113461986629495970906624068989946077105675645523273528635562629403801987437546065975727923699216445970216442514768863805081627839768811722146321285499786641189406405783293303345341940695705799775351411417462254279216114646303239516558938039696314696132321847183758386597680385555096304164889806708109671574307628775874801264283532892075033829687771727656673423136983729703945007767322673013844812631104326635423275779630386415644554975457429681000939864363432182813886827957169034177206260836436098306813661767268385678981503023632340248534968073899490580997604553325804587413984394417365793114631610321562480657810056434107863964886876967879126366946297380814981245178219971853634460893085346469874252164630851153043703687158646742812330748338938679529293272173345169528018398816788637610430340140749528430925151559617648256677769
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e7c3aad45cb9967a4c67d2b3f8b17062234b6498
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1916 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.1bbzz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.9rayti.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.abusers.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.anlegerwohnung.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.balboapropertyserivces.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.barkinganddagenhamnews.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.barons.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bazarbrasil.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.break.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.buildbits.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.burtonradio.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.comparemoji.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.duilawyers.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.duties.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dyk.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ebay-kleinanzeifen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eianadanieli.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fefe.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.firstveiw.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fullloves.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gofarmer.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.heurea.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kht.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kirriemuirnews.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kkm.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kreufahrten-zentrale.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lasagnerezept.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.livestockranch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.loka.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mediont.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nakupujevamto.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.plasticwrap.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.produces.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rollbars.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sdak.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.testsitemv1.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.theneuralnetwork.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.travelrepublic.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wellnisreisen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.westberkshirenews.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--badmbel-gnstig-ypb5h.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--bchingen-n4a.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--schildkrtenverkauf-k3b.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--sprche-und-wnsche-42bj.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--suglingsakne-gcb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--tintegnstig-yhb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--torbnder-3za.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--wrmestrmung-l8a4v.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.yin-yang.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.youcanfollow.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '1bbzz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '9rayti.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'abusers.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'anlegerwohnung.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'balboapropertyserivces.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'barkinganddagenhamnews.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'barons.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bazarbrasil.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'break.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buildbits.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'burtonradio.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'comparemoji.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'duilawyers.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'duties.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dyk.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ebay-kleinanzeifen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eianadanieli.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fefe.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'firstveiw.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fullloves.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gofarmer.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'heurea.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kht.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kirriemuirnews.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kkm.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kreufahrten-zentrale.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lasagnerezept.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'livestockranch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'loka.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mediont.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nakupujevamto.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plasticwrap.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'produces.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rollbars.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sdak.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'testsitemv1.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theneuralnetwork.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'travelrepublic.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wellnisreisen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'westberkshirenews.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--badmbel-gnstig-ypb5h.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--bchingen-n4a.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--schildkrtenverkauf-k3b.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--sprche-und-wnsche-42bj.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--suglingsakne-gcb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--tintegnstig-yhb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--torbnder-3za.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--wrmestrmung-l8a4v.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yin-yang.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'youcanfollow.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10076007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb5200000184847bc8cf0000040300473045022100b8e6d92d0095ffd067e27abd4f2d792596573ba2ca4e9e2c7ca381582fa506d20220215d09772483514536d6a83e412ce6de3ae8f6807f2a1c414bc87e7e49e56b09007700adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a00000184847bc9670000040300483046022100f0d3da88960606e8a849e15850c128e8a346fb6ff5a2c2d5d02e2fecb1583ba0022100fdf3e602194a563484ecbbbe897e6f9b82a3197806a49bf8cbd0ac2bd2988330
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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